Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/19A3EFD9D3B5018111423D33561D587A892213EF.cer
File:                     19A3EFD9D3B5018111423D33561D587A892213EF.cer (raw, json)
Hash identifier:          bAE4P4OEAMUG2pNvoj6GJ0WRXk/7HcVYCliE3e8uK7U=
Subject key identifier:   19:A3:EF:D9:D3:B5:01:81:11:42:3D:33:56:1D:58:7A:89:22:13:EF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6C56A9AB8B009E8282A089FCFA16C59D8D9E3899
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/19A3EFD9D3B5018111423D33561D587A892213EF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Jan 2023 18:55:47 +0000
Certificate not after:    Mon 22 Jan 2024 19:00:47 +0000
Subordinate resources:    AS: 268517
                          IP: 45.162.92.0/22
                          IP: 2804:526c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:56:a9:ab:8b:00:9e:82:82:a0:89:fc:fa:16:c5:9d:8d:9e:38:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 23 18:55:47 2023 GMT
            Not After : Jan 22 19:00:47 2024 GMT
        Subject: CN=19A3EFD9D3B5018111423D33561D587A892213EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d9:63:79:e3:dc:c3:80:e6:4f:f1:41:ef:cd:
                    bc:02:9b:cf:06:fa:f7:fc:e5:3d:b0:68:58:28:68:
                    1b:96:b3:4e:45:97:48:f9:af:4d:20:a4:3e:03:1f:
                    c7:46:e8:c5:7f:55:ea:fe:d1:81:b9:a7:50:36:37:
                    d2:5d:8c:1d:3e:e5:d7:53:e8:62:0d:d9:d1:1b:53:
                    85:e9:0e:cc:bf:2d:28:56:46:cd:8b:a8:4a:2b:6d:
                    b8:80:87:be:50:4b:53:2b:a6:0f:79:fc:49:f5:20:
                    37:76:9c:c5:17:c7:f1:f3:a5:71:b5:82:49:a0:8e:
                    16:26:53:27:94:83:51:fa:ed:f6:aa:5a:4d:e7:60:
                    c2:92:1c:71:6a:70:3e:b2:de:4f:b6:2f:24:34:06:
                    c4:08:dc:67:c1:56:88:5c:64:d4:77:9a:8d:ee:8c:
                    1c:17:38:63:0a:3e:03:32:fa:40:06:04:19:fc:cc:
                    d6:0f:08:42:03:d4:f8:16:f2:de:70:76:db:c8:e8:
                    db:24:b6:6a:42:43:0b:c4:ce:c7:a2:44:79:e1:01:
                    d6:3f:6c:de:01:cb:39:09:ff:8d:e6:25:42:69:c6:
                    78:2f:ba:96:e0:82:b0:9b:ef:6c:a0:40:07:d4:e8:
                    76:bd:0a:38:7c:a2:4f:28:6f:01:1a:d7:95:6c:c5:
                    05:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:A3:EF:D9:D3:B5:01:81:11:42:3D:33:56:1D:58:7A:89:22:13:EF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/19A3EFD9D3B5018111423D33561D587A892213EF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.92.0/22
                IPv6:
                  2804:526c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268517

    Signature Algorithm: sha256WithRSAEncryption
         18:3d:ae:a8:0e:80:99:97:e9:ce:32:fc:b9:98:e6:85:2d:ff:
         1d:8a:e4:83:33:bc:7c:d9:2c:0d:e5:09:f1:46:99:25:83:52:
         be:18:27:ea:8f:b5:73:e4:ca:47:56:94:38:30:f5:69:b6:c7:
         3f:f8:c0:70:da:29:f8:86:8b:e3:8e:28:08:dc:c3:20:82:92:
         d1:5d:c3:30:91:cb:7e:3d:a0:85:13:74:9e:f6:0a:be:5e:33:
         7d:a6:10:57:8f:76:9d:c5:88:ee:94:8d:68:dd:88:24:0a:10:
         32:f8:60:23:31:a2:23:70:4c:ca:2a:7f:ad:db:b2:ba:9f:e7:
         ad:ce:e3:9e:ae:d7:39:df:83:46:c7:f4:33:cf:09:77:a1:f4:
         5b:2e:b8:a7:f0:a4:62:1a:a9:8f:49:88:f1:95:05:49:7d:dd:
         e3:82:6d:f3:f4:3c:44:c7:89:1d:61:d9:cb:ac:08:93:f2:13:
         94:d5:52:e0:31:8a:9b:f8:74:f6:a2:8e:da:b0:65:06:cb:71:
         b8:66:a9:c2:ff:17:e9:76:b5:80:78:de:78:6d:08:ed:5c:6e:
         78:ae:1b:d4:96:23:57:74:1b:c0:6a:8c:5c:4f:b6:1f:16:70:
         ca:dc:02:14:1f:be:54:14:fe:28:b7:13:b0:61:df:c4:c2:05:
         76:e2:c1:6b
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgIUbFapq4sAnoKCoIn8+hbFnY2eOJkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMzAxMjMxODU1NDdaFw0yNDAxMjIxOTAwNDdaMDMxMTAvBgNV
BAMTKDE5QTNFRkQ5RDNCNTAxODExMTQyM0QzMzU2MUQ1ODdBODkyMjEzRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC52WN549zDgOZP8UHvzbwCm88G
+vf85T2waFgoaBuWs05Fl0j5r00gpD4DH8dG6MV/Ver+0YG5p1A2N9JdjB0+5ddT
6GIN2dEbU4XpDsy/LShWRs2LqEorbbiAh75QS1Mrpg95/En1IDd2nMUXx/HzpXG1
gkmgjhYmUyeUg1H67faqWk3nYMKSHHFqcD6y3k+2LyQ0BsQI3GfBVohcZNR3mo3u
jBwXOGMKPgMy+kAGBBn8zNYPCEID1PgW8t5wdtvI6NsktmpCQwvEzseiRHnhAdY/
bN4ByzkJ/43mJUJpxngvupbggrCb72ygQAfU6Ha9Cjh8ok8obwEa15VsxQWHAgMB
AAGjggMaMIIDFjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQZo+/Z07UBgRFC
PTNWHVh6iSIT7zAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBPwYIKwYB
BQUHAQsEggExMIIBLTBdBggrBgEFBQcwBYZRcnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ITmFxTjNyZGtBTlBxUWR3OGRma2FkUXZRR1ZxMVFvVEEy
QnNpQlRkc2drVC8wMIGKBggrBgEFBQcwCoZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby9ITmFxTjNyZGtBTlBxUWR3OGRma2FkUXZRR1ZxMVFvVEEy
QnNpQlRkc2drVC8wLzE5QTNFRkQ5RDNCNTAxODExMTQyM0QzMzU2MUQ1ODdBODky
MjEzRUYubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ry
by5ici9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2iXDANBAIAAjAHAwUA
KARSbDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEGOUwDQYJKoZIhvcNAQELBQAD
ggEBABg9rqgOgJmX6c4y/LmY5oUt/x2K5IMzvHzZLA3lCfFGmSWDUr4YJ+qPtXPk
ykdWlDgw9Wm2xz/4wHDaKfiGi+OOKAjcwyCCktFdwzCRy349oIUTdJ72Cr5eM32m
EFePdp3FiO6UjWjdiCQKEDL4YCMxoiNwTMoqf63bsrqf563O456u1znfg0bH9DPP
CXeh9FsuuKfwpGIaqY9JiPGVBUl93eOCbfP0PETHiR1h2cusCJPyE5TVUuAxipv4
dPaijtqwZQbLcbhmqcL/F+l2tYB43nhtCO1cbniuG9SWI1d0G8BqjFxPth8WcMrc
AhQfvlQU/ii3E7Bh38TCBXbiwWs=
-----END CERTIFICATE-----
Generated at Thu Apr 17 05:35:11 2025 by rpki-client